CyberRota Analysis
AI-GeneratedLibevent versions prior to 2.1.13 and 2.2.2-alpha are susceptible to a use-after-free vulnerability in the evbuffer_add_buffer_reference function, which can lead to memory corruption or process crashes when handling specific output buffers. This issue arises from improper management of buffer states, allowing attackers to exploit the dangling pointer. Organizations utilizing affected versions of Libevent should prioritize patching to mitigate potential disruptions in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c when evbuffer_add_buffer_reference processes an output buffer whose out_total_len is zero. evbuffer_free_all_chains frees the initial empty chain without resetting outbuf->first, outbuf->last, or outbuf->last_with_datap, and APPEND_CHAIN_MULTICAST subsequently dereferences the dangling chain pointer. A caller that can drive this buffer state can cause memory corruption or a process crash. This issue is fixed in versions 2.1.13 and 2.2.2-alpha.